General
-
Target
JaffaCakes118_621b3875992587930d9c14e304c129db
-
Size
390KB
-
Sample
250107-pceecazraz
-
MD5
621b3875992587930d9c14e304c129db
-
SHA1
cc48665a33b5d38d67e39403838403848e717694
-
SHA256
c2c8a797d07a926cff0f71d72c83052bb2969aba8af9fb9ccaaea11e37142487
-
SHA512
a263ba8a9f20eb44ee9f73c41164ef54f93d20c63d71cb6a5bc8b8a36c6eac25357e6988f0878ff36c968f1177469b3f456ef6a12d338d0312cdb5f0504c027a
-
SSDEEP
12288:RQXVTJpWBGzp5k8nsfomgOBw8vOIdDEkBWPL:2JJm
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_621b3875992587930d9c14e304c129db.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_621b3875992587930d9c14e304c129db.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@alexsandrovnaaaaaa
ananasalit.xyz:81
-
auth_value
55d48a1a930cf4d6f3e2d6bcd0daaf07
Targets
-
-
Target
JaffaCakes118_621b3875992587930d9c14e304c129db
-
Size
390KB
-
MD5
621b3875992587930d9c14e304c129db
-
SHA1
cc48665a33b5d38d67e39403838403848e717694
-
SHA256
c2c8a797d07a926cff0f71d72c83052bb2969aba8af9fb9ccaaea11e37142487
-
SHA512
a263ba8a9f20eb44ee9f73c41164ef54f93d20c63d71cb6a5bc8b8a36c6eac25357e6988f0878ff36c968f1177469b3f456ef6a12d338d0312cdb5f0504c027a
-
SSDEEP
12288:RQXVTJpWBGzp5k8nsfomgOBw8vOIdDEkBWPL:2JJm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-